pi-goal-list-loop-audit 0.28.32 → 0.28.34

package/README.md

@@ -201,7 +201,7 @@ No external watchdog plugin needed.
 /glla                                # open the settings UI
 /glla model=provider/id              # auditor model override → GLOBAL
 /glla thinking=high                  # auditor thinking → GLOBAL
-/glla notify='cmd "$1"'              # push on complete/pause/stop → GLOBAL
+/glla notify='cmd "$1"'              # custom push cmd · unset = auto-detect (notify-send/osascript) · off = silent → GLOBAL
 /glla tokenlimit=10000000            # per-goal token budget (default: off) → GLOBAL
 /glla tokenlimit=0                   # explicitly no cap (the default)
 /glla wedgealert=30                  # hung-command alert minutes (default: 30, 0 = off)
@@ -233,15 +233,14 @@ activates the moment the agent proposes it, with a notification and a
 `draft_autoaccepted` ledger entry (auto-accept is never silent). The seed
 carries the intent. Pair with `autoresume=on` for fully unattended rigs.
 
-## Subagents (`@tintinweb/pi-subagents`)
+## Subagents
 
-Subagent sessions bind extensions too, so glla loads there — by design the
-**main session owns the goal/loop/list; subagents are workers** (v0.23.8):
+glla's guarantees here come from glla itself (session-handle
+discrimination), not from any specific subagent plugin — any Agent-tool
+provider gets them. Subagent sessions bind extensions too, so glla loads
+there — by design the **main session owns the goal/loop/list; subagents
+are workers** (v0.23.8):
 
-- Read-only agents (Explore, Plan) get no glla tools (pi-subagents gates
-  them); general-purpose agents see them but state-mutating calls
-  (`complete_goal`, `propose_*`, `list_add`, `pause_goal`, …) are refused
-  with "report back to the main agent".
 - A subagent session never clobbers the loop's session handle, never runs
   the restore gate, and never drives continuation — so the heartbeat,
   wedge alert, and auto-resume machinery always act on the main session.
@@ -249,6 +248,11 @@ Subagent sessions bind extensions too, so glla loads there — by design the
   is the discriminator.)
 - Subagent tool activity counts as activity for the wedge clock — a long
   subagent run is work, not a hang.
+- With `@tintinweb/pi-subagents` specifically (the one we test against):
+  read-only agents (Explore, Plan) get no glla tools; general-purpose
+  agents see them but state-mutating calls (`complete_goal`, `propose_*`,
+  `list_add`, `pause_goal`, …) are refused with "report back to the main
+  agent".
 
 ## Token guard
 
@@ -287,17 +291,25 @@ contradictory turns. One driver at a time:
   fine to keep, never run a ralph loop while a goal/list/loop is active.
 
 **Goes well with it**: `@juicesharp/rpiv-ask-user-question` (drafting uses its
-structured forms), `@tintinweb/pi-subagents` (spawn research/review subagents
-inside goal work), `@tintinweb/pi-tasks` (session-wide DAGs vs our goal-scoped
-task lists — different granularity), `pi-chrome` (the research/search path for
-goals — logged-in browsing with no extra services; standalone search skills
-like `mmx-cli`/`pi-search-skill` are optional conveniences for bulk queries,
-not requirements).
+structured forms), any subagent provider — e.g. `@tintinweb/pi-subagents` —
+(spawn research/review subagents inside goal work), `pi-chrome` (the
+research/search path for goals — logged-in browsing with no extra services;
+standalone search skills like `mmx-cli`/`pi-search-skill` are optional
+conveniences for bulk queries, not requirements).
+
+**Overlaps — pick one**: `@tintinweb/pi-tasks` is a second task list next to
+`/list`, and in practice the glla list *is* the task list (queue, statuses,
+per-item audit trail) while the todos end up the weaker copy. We ran both
+and removed pi-tasks. If you truly need session-wide dependency DAGs beyond
+one ordered queue, it exists — but installing both is not the ideal combo.
 
 **Two footnotes**: (1) extension-registered providers work in the main session
 but not the auditor's extension-less session — if audits fail auth, set the
-override once with `/glla model=`. (2) `pi-notify-agent` notifies on every turn;
-`/glla notify=` fires only on goal complete/pause/loop stop.
+override once with `/glla model=`. (2) `pi-notify-agent` notifies on every
+turn; glla pushes fire only where there is something to DO (pauses, verdicts,
+storms, wedge) and work out of the box — with no `notify=` configured glla
+auto-detects `notify-send`/`osascript`; `notify=off` silences, `notify='<cmd>'`
+customizes.
 
 ## Files
 

package/extensions/loops/goal.ts

@@ -1932,15 +1932,44 @@ function addSingleItem(ctx: ExtensionContext, raw: string): void {
 }
 
 /**
- * Config-gated push notification: if settings.notifyCmd is set, shell out
- * with the message as $1. Fire-and-forget — a broken notify command never
- * blocks the loop. /glla notify='<cmd>' to configure.
+ * Push notification, folded IN by default (v0.28.34 — user: "leaving it to
+ * the user to set up sucks, cause then they won't have it"). Resolution:
+ *   notifyCmd === "off"   → silent (explicit opt-out)
+ *   notifyCmd set         → that command, message passed as $1
+ *   notifyCmd unset       → auto-detect ONCE per session: notify-send
+ *                           (Linux) or osascript (macOS); none → silent.
+ * Pushes fire only where there is something to DO — pauses, auditor
+ * verdicts, storms, wedge, persistence degradation — never per-turn noise.
+ * Fire-and-forget: a broken notifier never blocks the loop.
  */
+let autoNotifyCmd: string | null | undefined; // undefined = not probed yet
+
+function probeAutoNotify(ctx: ExtensionContext): void {
+  if (autoNotifyCmd !== undefined || !extensionApi) return;
+  autoNotifyCmd = null; // probing sentinel — drops at most the first push
+  void extensionApi
+    .exec("bash", ["-c", "command -v notify-send || command -v osascript || true"], { cwd: ctx.cwd })
+    .then((r) => {
+      const found = String((r as { stdout?: string }).stdout ?? "").trim();
+      if (found.endsWith("notify-send")) autoNotifyCmd = `notify-send "pi-goal-list-loop-audit" "$1"`;
+      // env-var handoff: the message never touches AppleScript quoting.
+      else if (found.endsWith("osascript")) autoNotifyCmd = `GLLA_MSG="$1" osascript -e 'display notification (system attribute "GLLA_MSG") with title "pi-goal-list-loop-audit"'`;
+      else autoNotifyCmd = null;
+    })
+    .catch(() => {
+      autoNotifyCmd = null;
+    });
+}
+
 function notifyExternal(ctx: ExtensionContext, message: string): void {
   try {
     const settings = loadSettings(ctx.cwd);
-    const cmd = settings.notifyCmd;
-    if (!cmd || !extensionApi) return;
+    if (settings.notifyCmd === "off" || !extensionApi) return;
+    const cmd = settings.notifyCmd ?? autoNotifyCmd;
+    if (!cmd) {
+      if (settings.notifyCmd === undefined && autoNotifyCmd === undefined) probeAutoNotify(ctx);
+      return;
+    }
     void extensionApi.exec("bash", ["-c", cmd, "pi-goal-list-loop-audit", message], { cwd: ctx.cwd }).catch(() => {});
   } catch {
     // non-fatal by design
@@ -3892,7 +3921,7 @@ export async function handleSettingChoice(id: string, ctx: ExtensionContext): Pr
       // current effective subagent models. Treat as no-op.
       return;
     case "notifyCmd": {
-      const v = await ctx.ui.input("Notify command — the event message is passed as $1", "e.g. a desktop-notification or push command; empty = off");
+      const v = await ctx.ui.input("Notify command — the event message is passed as $1", "custom command · empty = auto-detect (notify-send/osascript) · 'off' = silent");
       if (v !== undefined) saveSettings("global", ctx.cwd, { notifyCmd: v.trim() || undefined });
       return;
     }
@@ -4186,7 +4215,7 @@ function cmdLog(args: string, ctx: ExtensionContext): void {
 }
 
 /**
- * v0.28.31: /glla reset — ONE confirmed command that leaves a project with
+ * v0.28.31 (renamed v0.28.33): /glla wipe — ONE confirmed command that leaves a project with
  * zero live glla state. User directive: "make sure we only have one goal or
  * loop or list at a time — many of my older projects have leftovers" (the
  * fleet scan found queued lists up to 56 deep, held loops at iter 50, and
@@ -4195,7 +4224,7 @@ function cmdLog(args: string, ctx: ExtensionContext): void {
  * the list is cleared, the loop record is wiped after a graceful stop.
  * History stays in .pi-glla; only the live state goes.
  */
-async function cmdGllaReset(ctx: ExtensionContext): Promise<void> {
+async function cmdGllaWipe(ctx: ExtensionContext): Promise<void> {
   const g = state.goal;
   const live = g && (g.status === "active" || g.status === "paused" || g.status === "auditing");
   const n = listQueue().length;
@@ -4211,36 +4240,36 @@ async function cmdGllaReset(ctx: ExtensionContext): Promise<void> {
   if (loop) parts.push(`loop ${loop.active ? "stopped" : "cleared"} (iter ${loop.iteration}${loop.bestValue !== null && loop.bestValue !== undefined ? `, best ${loop.bestValue}` : ""})`);
   if (ctx.hasUI) {
     try {
-      const ok = await ctx.ui.confirm("Reset glla state?", `${parts.map((p) => `  ${p}`).join("\n")}\n\nHistory stays in .pi-glla (archive + ledger); the live state is wiped.`);
+      const ok = await ctx.ui.confirm("Wipe glla state?", `${parts.map((p) => `  ${p}`).join("\n")}\n\nHistory stays in .pi-glla (archive + ledger); the live state is wiped.`);
       if (!ok) {
-        ctx.ui.notify("Reset cancelled.", "info");
+        ctx.ui.notify("Wipe cancelled.", "info");
         return;
       }
     } catch {
-      ctx.ui.notify("Reset cancelled.", "info");
+      ctx.ui.notify("Wipe cancelled.", "info");
       return;
     }
   }
-  appendLedger(ctx.cwd, "glla_reset", { goalId: live ? g!.id : undefined, listCleared: n, loop: loop ? { iteration: loop.iteration, active: loop.active } : undefined });
+  appendLedger(ctx.cwd, "glla_wipe", { goalId: live ? g!.id : undefined, listCleared: n, loop: loop ? { iteration: loop.iteration, active: loop.active } : undefined });
   if (live) {
-    archiveCurrentGoal(ctx, "aborted", "user reset (/glla reset)");
+    archiveCurrentGoal(ctx, "aborted", "user wipe (/glla wipe)");
     ctx.abort();
   } else if (g) {
     state = { ...state, goal: null };
   }
   if (n > 0) {
     state = { ...state, list: [] };
-    appendLedger(ctx.cwd, "list_cleared", { via: "glla_reset" });
+    appendLedger(ctx.cwd, "list_cleared", { via: "glla_wipe" });
   }
   if (loop) {
     clearLoopTimer();
     state.loop = undefined;
     await finishLoopGit(ctx, loop);
-    appendLedger(ctx.cwd, "loop_stopped", { reason: "user reset (/glla reset)", iterations: loop.iteration, best: loop.bestValue });
+    appendLedger(ctx.cwd, "loop_stopped", { reason: "user wipe (/glla wipe)", iterations: loop.iteration, best: loop.bestValue });
   }
   persistState(ctx);
-  ctx.ui.notify(`glla reset done: ${parts.join(" · ")}. Clean slate.`, "info");
-  notifyExternal(ctx, "glla state reset by user — clean slate.");
+  ctx.ui.notify(`glla wipe done: ${parts.join(" · ")}. Clean slate.`, "info");
+  notifyExternal(ctx, "glla state wiped by user — clean slate.");
 }
 
 /**
@@ -4297,7 +4326,7 @@ async function cmdGllaResume(ctx: ExtensionContext): Promise<void> {
  * list item is archived as aborted (its queue is untouched), an active or
  * held loop is stopped. Same outcome shape regardless of hidden type —
  * the user's caveat ("this sucks if one command doesn't work for others")
- * is why /list cancel (item + drop queue) and /glla reset (nuke all)
+ * is why /list cancel (item + drop queue) and /glla wipe (nuke all)
  * remain the power verbs instead of being folded in.
  */
 async function cmdGllaCancel(ctx: ExtensionContext): Promise<void> {
@@ -4310,7 +4339,7 @@ async function cmdGllaCancel(ctx: ExtensionContext): Promise<void> {
     await cmdLoop("stop", ctx);
     return;
   }
-  ctx.ui.notify("Nothing to cancel — no active/paused goal/list-item, no loop. Queued list items: /list clear; everything: /glla reset.", "info");
+  ctx.ui.notify("Nothing to cancel — no active/paused goal/list-item, no loop. Queued list items: /list clear; everything: /glla wipe.", "info");
 }
 
 function cmdAudits(args: string, ctx: ExtensionContext): void {
@@ -4370,9 +4399,15 @@ async function cmdSettings(args: string, ctx: ExtensionContext): Promise<void> {
     cmdLog(trimmed.slice("log".length).trim(), ctx);
     return;
   }
-  // v0.28.31: /glla reset — one-shot clean slate for leftover-laden projects.
+  // v0.28.33: renamed reset → wipe — "reset" sat at edit-distance 2 from
+  // "resume" in the same namespace, and it's the destructive one (user
+  // catch, same day it shipped, before any muscle memory formed).
+  if (/^wipe\b/.test(trimmed)) {
+    await cmdGllaWipe(ctx);
+    return;
+  }
   if (/^reset\b/.test(trimmed)) {
-    await cmdGllaReset(ctx);
+    ctx.ui.notify("/glla reset is now /glla wipe (renamed — too close to /glla resume). Nothing was done.", "info");
     return;
   }
   // v0.28.32: /glla resume + /glla cancel — type-blind verbs over the ONE
@@ -4776,9 +4811,9 @@ export default function (pi: ExtensionAPI): void {
       ["decisionpopup=", "on|off: decision pauses pop the select() picker (default on; the widget card always lists the options, /goal decide reopens the picker)"],
       ["auditcap=", "N: pause goal after N consecutive auditor disapprovals (default 5, 0 = unlimited)"],
       ["log", "event-trail tail: /glla log [N] — who created/resumed/paused what, from where (v0.28.28)"],
-      ["reset", "wipe live glla state (goal archived, list cleared, loop stopped) — one-shot cleanup for leftover-laden projects"],
+      ["wipe", "WIPE live glla state (goal archived, list cleared, loop stopped) — one-shot cleanup for leftover-laden projects"],
       ["resume", "resume WHATEVER is paused/held (goal, list item, or held loop) — no need to know the type"],
-      ["cancel", "cancel the ONE live thing uniformly (goal/list item archived, loop stopped) — queue untouched; /list clear or /glla reset for more"],
+      ["cancel", "cancel the ONE live thing uniformly (goal/list item archived, loop stopped) — queue untouched; /list clear or /glla wipe for more"],
       ["auditfeedbackchars=", "cap on executor-visible disapproval report chars (0 = full report, the default)"],
       ["aggressivemode=", "on: keep-going defaults — autoResume, cap 10, stuck 10, wedge off, quota auto-retry, cap→TODOs"],
       ["quotaretryminutes=", "N: minutes before auto-retrying a quota-exhausted auditor (default 60)"],

package/extensions/settings-menu.ts

@@ -323,9 +323,9 @@ export function buildSettingsRows(
       id: "notifyCmd",
       section: "other",
       label: "Notify command",
-      valueText: show("notifyCmd", "off"),
+      valueText: show("notifyCmd", "auto"),
       sourceText: src("notifyCmd"),
-      description: "desktop push command; the event message is passed as $1",
+      description: "custom command ($1 = message) · unset = auto-detect notify-send/osascript · 'off' = silent",
     },
     {
       id: "tokenLimit",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-goal-list-loop-audit",
-  "version": "0.28.32",
+  "version": "0.28.34",
   "description": "Goal. Loop. Audit. Done. \u2014 a pi-coding-agent extension that supervises long-running work, with isolated auditor on each completion. Beat bamboozling by design: the auditor runs in a fresh session with no extensions, no skills, no editor \u2014 only the read tools needed to verify your goal.",
   "license": "MIT",
   "author": "dracon",